CVE-2018-16438 — Out-of-bounds Read in Hdf5

CWE-125 — Out-of-bounds Read8 documents6 sources
Severity
8.8HIGHNVD
EPSS
0.5%
top 32.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Hdfgroup Hdf5Debian Hdf5
Timeline
PublishedSep 4
Latest updateMay 14

Description

An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in H5L_extern_query at H5Lexternal.c.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

▶debiandebian/hdf5< hdf5 1.14.5+repack-1 (forky)
▶Debianhdfgroup/hdf5< 1.14.5+repack-1+1
▶NVDhdfgroup/hdf51.8.20

🔴Vulnerability Details

2
GHSA
GHSA-9xmm-cpf8-rgmx: An issue was discovered in the HDF HDF5 1↗2022-05-14
▶
OSV
CVE-2018-16438: An issue was discovered in the HDF HDF5 1↗2018-09-04
▶

📋Vendor Advisories

2
Red Hat
hdf5: out of bounds read in H5L_extern_query at H5Lexternal.c↗2018-08-06
▶
Debian
CVE-2018-16438: hdf5 - An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bound...↗2018
▶

💬Community

3
Bugzilla
CVE-2018-16438 hdf5: out of bounds read in H5L_extern_query at H5Lexternal.c [epel-all]↗2018-09-04
▶
Bugzilla
CVE-2018-16438 hdf5: out of bounds read in H5L_extern_query at H5Lexternal.c↗2018-09-04
▶
Bugzilla
CVE-2018-16438 hdf5: out of bounds read in H5L_extern_query at H5Lexternal.c [fedora-all]↗2018-09-04
▶